bbhunter

attack-tools. A set of tools, procedures, and playbooks for performing bug bounties

WAF-Stuff. A substitute repository put up on public demand for the original Awesome WAF repository (https://github.com/0xInfection/Awesome-WAF) which has been temporarily (10 days) taken down by GitHub.

403fuzzer. Fuzz 403/401ing endpoints for bypasses

My-WebSec-Notes. Some notes (tips/tricks) gathered by me during time related to web pentesting, bug bounty and browser/tools stuff.

Proxadd. A tool that adds proxy entries to Proxychains config

Dump-Chrome-Cookies. Repo with a modified version of CookieBro and scripts to leverage it to dump Chrome cookies

gojsx. Find juicy information inside javascript files.

gal. Get all the links for target websites using href / src / url / etc.

Web-writeups. Web Writeups for bug bounty and pentesting

insecure_website. This is a django web applictation full of bugs .. can be useful for learning bug bounty and computer security

Domainker. My BugBounty helper tool

b0untyz. bug bounty automation suite

Bugbounty0x0a. Bugbounty0x0a is my path to get into bug hunting

FindScript. Scrape Google and Github to find JS or similar files from a given URL

custom-nuclei-templates. Personal collection of nuclei templates for bug bounty hunting

SWFPFinder. SWFPFinder - SWF Potential Parameters Finder

Andrill. Java

BugBounty-4.

autopoisoner. Web cache poisoning vulnerability scanner.

SSTI. Server-Side-Template-Injection Example

commit-stream. #OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API

technodrome. bug bounty dockerfile by highjack

Ultra-Recon. A tool for running recon tools with Docker

Pinaak. A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan

burp-extensions-1. Burp Extensions